Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.mft
File:                     6mtJsHUq07491oO4ruoiBfWv0nk.mft (raw, json)
Hash identifier:          wFENca/uwng95TNkmDopfsgisrCWbRVmw8ms9XrdWUk=
Subject key identifier:   20:CF:3E:D3:26:43:ED:70:A8:A0:97:CF:96:DD:55:FD:9E:E4:C6:D5
Authority key identifier: EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79
Certificate issuer:       /CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
Certificate serial:       68
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.mft
Manifest number:          17EE
Signing time:             Sun 22 Jun 2025 06:36:27 +0000
Manifest this update:     Sun 22 Jun 2025 06:36:27 +0000
Manifest next update:     Mon 07 Jul 2025 06:36:27 +0000
Files and hashes:         1: 6mtJsHUq07491oO4ruoiBfWv0nk.crl (hash: 9qy+ie6rH3+Na33WtPQNZ2CNHtjqzyNJt56Wlx5ohwk=)
                          2: O0wM-npMdxMDm05y3epTGtFJNcw.roa (hash: Awv88sk3mBL/GwxxJZRXo2O8JS7Q34zBaD6oMVqoBck=)
                          3: O4qq2Afe-SVmxVx_dkOeMKOxU7o.roa (hash: PxOykq77LscBiXeP6WviP2Jbm6+wKUhQkSqad1e7XSg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Jun 2025 02:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
        Validity
            Not Before: Jun 15 01:31:38 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=20CF3ED32643ED70A8A097CF96DD55FD9EE4C6D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:31:1f:6e:bc:9b:0a:21:d8:3f:9d:7b:21:34:
                    3d:c2:2e:04:d1:db:74:c2:4e:bd:90:8b:3b:5b:c2:
                    fa:97:e9:f0:1a:0a:22:50:f5:a0:04:77:c7:0f:21:
                    99:34:87:e9:18:67:6b:d5:f9:53:11:3c:49:60:a2:
                    eb:8a:18:d1:d7:3a:85:b8:98:f5:38:b6:88:9f:48:
                    64:6b:ce:a4:6c:1d:da:bb:48:34:32:52:01:ab:02:
                    0c:d3:c6:a4:8c:4d:01:3c:eb:15:dd:ba:c1:9b:60:
                    63:d4:94:f9:98:96:f0:20:3d:12:b3:ff:ce:97:56:
                    55:2e:0e:31:6e:46:9c:c3:64:8c:3a:a2:f0:bd:86:
                    ee:f6:b8:bf:0a:b1:ad:bf:51:d2:c6:ec:1e:35:c0:
                    e8:f6:43:3d:8b:3e:f5:96:11:04:70:0d:6a:79:f4:
                    52:3a:e2:51:2d:b1:9a:67:36:f3:db:20:43:a9:77:
                    67:b2:58:51:ce:bb:cd:39:88:55:4c:8b:50:3e:4d:
                    78:57:fd:2a:e2:a7:35:3e:8d:5b:c6:f3:ec:04:4f:
                    8c:2d:62:ad:8d:2c:1e:0f:ff:9c:ae:c8:69:db:b8:
                    d8:ff:17:aa:e8:f8:90:9a:9f:05:f0:c0:8c:7f:a2:
                    1a:b4:69:20:f2:ca:3e:fb:bf:a8:c2:b5:22:a7:d6:
                    20:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CF:3E:D3:26:43:ED:70:A8:A0:97:CF:96:DD:55:FD:9E:E4:C6:D5
            X509v3 Authority Key Identifier:
                keyid:EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a2:bc:17:6f:a0:3d:8f:79:bd:aa:0b:8f:ea:cb:10:cc:18:
         19:15:de:d8:46:fc:87:8e:4d:cc:b1:ee:a1:da:29:15:9c:f6:
         d5:bd:67:89:b5:7d:f6:a5:29:65:7d:60:25:22:06:4f:3d:ad:
         e5:9f:d3:de:07:b0:e0:77:d9:2e:35:67:2d:85:3d:24:67:7a:
         c6:e6:45:8e:f8:21:cb:2d:48:20:16:df:5e:75:e0:2f:cc:ef:
         a7:30:36:00:8e:67:c7:79:b3:b1:64:c0:ad:a7:f3:77:91:96:
         19:11:44:60:df:cf:cf:89:aa:df:18:ec:2d:57:6a:ad:5f:6e:
         2b:a7:fc:6c:3a:a6:e8:f5:ef:ad:e8:81:0b:99:00:62:9d:1a:
         22:6f:b7:02:1a:b6:44:07:d4:04:1d:a8:17:5e:ee:a9:08:3e:
         94:8d:77:12:53:90:f0:0d:78:14:84:a2:e8:f2:fb:69:4f:a5:
         d1:c8:ba:0e:35:60:c8:d1:23:ed:48:b2:7f:c1:c1:de:1f:a4:
         7a:6c:fa:ad:cd:2b:6d:a6:af:26:3f:b4:32:6d:cd:88:2e:9a:
         ad:f2:1d:40:9f:e9:57:3a:1f:13:4b:ee:48:f3:aa:6d:69:7e:
         76:f0:6e:6d:36:af:91:73:04:87:f7:07:59:4e:e0:ad:8d:fd:
         f4:b7:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 08:56:04 2025 by rpki-client